Homeland 
Security 

Daily Open Source Infrastructure Report 

12 June 2013 

Top Stories 

• Clean-up crews were working to neutralize about 1500 pounds of hydraulic acid that was 
released into the air and onto the ground following a June 9 leak at the Louisville, 
Kentucky DuPont plant. - WFPL 89.3 FM Louisville (See item 2) 

• Approximately 34 people were sickened by fumes June 10 at the R.W. Garcia 
Corporation’s Lincolnton, North Carolina plant. - Charlotte Observer (See item 18) 

• According to the U.S. Centers for Disease Control and Prevention, around 87 people in 
eight States are now known to have been sickened with hepatitis A in the outbreak 
connected to Townsend Farms frozen berries sold at Costco and Harris Teeter stores. - 
Food Safety News (See item 20) 

• A letter addressed to the Central Intelligence Agency was returned as undeliverable to a 
Spokane, Washington post office and was determined to be the fifth in a series of ricin- 
laced letters sent to government figures and agencies. - Associated Press (See item 30) 
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Energy Sector 



1. June 10, Associated Press - (Montana) PPL agrees to upgrades if coal plant doesn’t 
close. PPL Montana reached a settlement to reduce future pollution from the Corette 
coal plant if it remains operational by agreeing to a $250,000 penalty for past pollution 
violations and installing an estimated $10 million in new pollution controls at the 
Billings power plant if the company reverses its plan to close the site. 

Source: http://www.kulr8.com/storv/22552752/ppl-agrees-to-upgrades-on-plant-slated- 
for-closure 



For additional stories, see items 11 , 13 
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Chemical Industry Sector 

2. June 10, WFPL 89.3 FM Louisville - (Kentucky) Work continues to neutralize 
chemical after spill at DuPont plant. Clean-up crews were working to neutralize 
about 1500 pounds of hydraulic acid that was released into the air and onto the ground 
following a June 9 leak at the DuPont plant in Louisville, a process that could take up 
to 2 days. 

Source: http://www.wfpl.org/post/work-continues-neutralize-chemical-after-spill- 
dupont-plant 

[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

3. June 10, Beaver County Times - (Pennsylvania) Unit 2 at Beaver Valley brought 
back to power. The Unit 2 reactor at the Beaver Valley nuclear power plant in 
Shippingport was brought back online after a 2 week outage caused by unexpected 
generator vibration. 

Source: http://www.timesonline.com/news/energv/unit-at-beaver-valley-brought-back- 
to-power/article f5595da4-189e-58ba-ae0a-309a81d37e59.html 

[ Return to top ] 

Critical Manufacturing Sector 

4. June 11, U.S. Department of Labor - (New York) Orange County, NY, 
manufacturer faces more than $118,000 in additional US Labor Department fines 
for uncorrected and recurring hazards. The Occupational Safety and Health 
Administration cited architectural hardware manufacturer S.A. Baxter for failing to 
address previously identified hazards at their Chester, New York facility, with fines 
totaling $117,920. 

Source: 
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https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=24183 



5. June 10, Detroit Bureau - (National) Honda airbags to be investigated by highway 
safety agency. The National Highway Traffic Safety Administration opened an 
investigation into 320,000 model year 2003-2004 Honda Odyssey vehicles due to 
reports of injuries caused by airbags that deployed while the vehicle was being operated 
but was not involved in a crash. 

Source: http://www.nbcnews.com/business/nhtsa-opens-investigation-honda-airbags- 
6C10262990 

6. June 10, Examiner.com - (National) Chrysler recalls Dodge Dart for powertrain 
control modules. Chrysler announced the recall of 14,800 model year 2013 Dodge 
Dart vehicles due to a defect in the vehicles’ power control modules (PCM) that can 
cause the vehicle to stall and suddenly lose power. 

Source: http://www.examiner.com/article/chrysler-recalls-dodge-dart-for-powertrain- 
control-modules 

7. June 10, U.S. Department of Labor - (Missouri) Davis Tool & Die cited after worked 
electrocuted at Fenton, Mo., facility; US Labor Department’s OSHA finds 17 
violations during fatality investigation. The Occupational Safety and Health 
Administration cited Davis Tool & Die for one repeat, nine serious, and seven other 
safety violations at its Fenton facility found during an investigation of a worker’s death 
by electrocution. The proposed fines for the violations totaled $77,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=24177 
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Defense Industrial Base Sector 

Nothing to report 



T Return to top] 



Financial Services Sector 

8. June 10, Scripps Media - (California) Bakersfield couple plead guilty in $6M 
mortgage fraud scheme. Two individuals from Bakersfield pleaded guilty to fraud 
charges for their role in a $6 million mortgage fraud scheme involving three others. 
Source: http://www.turnto23.com/news/local-news/bakersfield-couple-plead-guiltv-in- 
6m-mortgage-fraud-scheme-06 1013 

9. June 10, Contra Costa Times - (California) Oakland police arrest suspected serial 
bank robber dubbed ‘Button Down Bandit’. Local police and the FBI arrested a man 
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in Oakland believed to be the “Button Down Bandit” suspected in eight bank robberies 
in the East Bay area. 

Source: http://www.contracostatimes.com/breaking-news/ci 23430629/oakland-police- 
arrest-accused-serial-bank-robber-dubbed?IADID=Search-www.contracostatimes.com- 
www.contracostatimes.com 



10. June 10, Softpedia - (International) Mobile version of Cridex banking trojan spotted 
in the wild. A mobile version of the Cridex/Bugat banking trojan targeting Android, 
Blackberry, and Symbian devices was spotted in the wild by researchers from RSA. 
Source: http://news.softpedia.com/news/Mobile-Version-of-Cridex-Banking-Troian- 
Spotted-in-the-Wild-35995 1 .shtml 

For another story, see item 30 
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Transportation Systems Sector 

11. June 11, WALB 10 Albany - (Georgia) Douglas gas explosion ruled accidental. An 
accidental propane explosion that left three people injured at the Ferrell Gas facility on 
Highway 32 just west of Douglas closed the highway for several hours. Firefighters 
diluted a small leak that remained on the delivery truck and allowed it to empty on its 
own. 

Source: http://www.walb.com/story/22555207/highwav-closed-for-hours-after- 
explosion 

12. June 11, Killeen Daily Herald - (Texas) Dump truck tilts bed, collides with cement 
retaining wall. An accident in which an 18-wheeler dump truck destroyed four feet of 
a cement retaining wall on a Texas overpass prompted authorities to close both 
directions on U.S. Route 190 and Clear Creek Road for nearly 4 hours. 

Source: http://kdhnews.com/news/wheeler-strikes-clear-creek-bridge-traffic-routed-to- 
frontage-roads/article 6b8c94a2-dlfc-lle2-88ac-001a4bcf6878.html 

13. June 11, Crystal Lake Northwest Herald - (Illinois) Route 14 accident causes power 
outages, road closure. A one car accident prompted a nearly 2 hour closure of Route 
14 in Crystal Fake and temporarily cut power to an estimated 2,600 ComEd customers. 
Source: http://www.nwherald.com/2013/06/10/route-14-accident-causes-power- 
outtages-road-closure/a5e3hh5/ 

14. June 11, Sarasota Herald-Tribune - (Florida) Sarasota man dies in Bee Ridge crash. 
A motorcycle accident, that killed the driver, blocked the northbound lanes of Tuttle 
Avenue and the eastbound lanes of Bee Ridge Road in Sarasota for over 2 hours as 
investigators examined the scene. 

Source: 

http://www.heraldtribune.com/article/20130610/BREAKING/130619971/2055/NEWS 

?Title=NEW-Fatal-accident-shuts-down-Bee-Ridge-Road- 
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15. June 10, St. Joseph News-Press - (Missouri) Traffic resumes after accident blocks 
U.S. 169. A June 10 roll-over accident prompted authorities to intermittently block 
lanes on U.S. Route 169 between St. Joseph and Gower for several hours. 

Source: http://www.newspressnow.com/news/local news/article Obeac753-c797-5f98- 
8aeO-a715b8a61d65.html 

16. June 10, WYMT 57 Hazard - (Kentucky) One dead in head on crash on Highway 15. 
Both directions of Highway 15 in Hazard were shut down for several hours June 10 
following a head on collision that left one person dead and another injured. 

Source: http://www.wkyt.com/wvmt/home/headlines/One-dead-in-head-on-crash-on- 
Highway-15-210865101.html 

17. June 10, KTVN 2 Reno - (Nevada) Troopers investigate deadly Highway 50 
accident. Three lanes on Highway 50 in Glenbrook were blocked for 3 hours June 9 
following a fatal accident that left one person dead and three others injured. 

Source: http://www.ktvn.com/storv/22551376/troopers-investigate-deadly-highwav-50- 
accident 
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Food and Agriculture Sector 

18. June 11, Charlotte Observer - (North Carolina) 34 sickened at Lincolnton plant. 
Approximately 34 people were sickened by fumes June 10 at a R.W. Garcia 
Corporation plant in Lincolnton. Ten of those sickened had moderate to high levels of 
carbon monoxide poisoning. 

Source: http://www.charlotteobserver.eom/2013/06/l 1/4098827/34-sickened-at- 
lincolnton-plant.html 

19. June 10, Food Safety News- (Florida) Cherry tomatoes recalled in Florida for 
Salmonella contamination. Florida-based Alderman Farms Sales Corporation issued a 
voluntary recall of 120 pints of its cherry tomatoes because they may be contaminated 
after the U.S. Food and Drug Administration discovered Salmonella in a sample of the 
product. 

Source: http://www.foodsafetvnews.com/2013/06/cherrv-tomatoes-recalled-in-florida- 
for-salmoi)ella-contaminatton/#.UbcHf mkr44 

20. June 10, Food Safety News- (National) Townsend Farms hepatitis A outbreak hits 
87. According to the U.S. Centers for Disease Control and Prevention, around 87 
people in eight States are now known to have been sickened with hepatitis A in the 
outbreak connected to Townsend Farms frozen berries sold at Costco and Harris Teeter 
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stores. 

Source: http://www.foodsafetvnews.com/2013/06/townsend-farms-hepatitis-a- 
outbreak-hits-87/#.UbcG7Pmkr44 



Water and Wastewater Systems Sector 



21. June 11, Sanford Herald- (Florida) Weather causes wastewater spills; no public 
health risk, officials say. Heavy rain June 7 led to 5,900 gallons of wastewater to spill 
from various manholes near downtown Sanford. Officials reported there was no health 
threat to the public. 

Source: http://www.sanfordherald.com/news/xl463427011/Weather-causes- 
wastewater-spills-no-public-health-risk-officials-say 

22. June 11, Fayetteville Observer - (North Carolina) Tropical Storm Andrea causes 
wastewater spoils in Harnett County. Heavy rainfall June 7 from Tropical Storm 
Andrea caused about 40,000 gallons of wastewater to enter various waterways in 
Harnett County, according to authorities. 

Source: http://www.favobserver.com/articles/2013/06/ll/1262623 
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Healthcare and Public Health Sector 

23. June 10, U.S. Department of Labor - (Maryland) Maryland’s Integra Health 
Management cited by US Department of Labor’s OSHA for workplace violence 
hazards following employee fatality. Maryland-based Integra Health Management 
was cited by the U.S. Department of Labor’s Occupational Safety and Health 
Administration for two violations and fined $10,500 in proposed penalties stemming 
from a December 2012 incident when a service coordinator was fatally stabbed by a 
patient in front of the patient’s home despite previously raised concerns about the 
patient by the employee. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=24171 

24. June 10, Health IT Security - (California) PHI for nearly 4,500 patients found 
during Calif, drug bust. Police in Oakland found a cache of stolen protected health 
information for roughly 4,500 patients from three different California hospitals during a 
drug bust. Authorities are investigating how the records were obtained while all three 
hospitals notified patients affected by the breach. 

Source: http://healthitsecuritv.corn/2013/06/10/phi-for-nearlv-4500-patients-found- 
during-calif-drug-bust/ 

25. June 10, Wilkes-Barre Times Leader - (Pennsylvania) Broken pipe at Pa. assisted 
living requires evacuation. Nanticoke Villa personal home care was evacuated June 9 
and 63 residents were temporarily displaced after a broken water pipe shut down the 
building’s electricity, fire alarm, and sprinkler system. Officials were assessing the 
damage while residents took shelter at the Greater Nanticoke Area High School. 

Source: http://www.firehouse.com/news/10957787/broken-pipe-at-pa-assisted-living- 
requires-evacuation 



- 6 - 



[ Return to top ] 



Government Facilities Sector 

26. June 11, Atlanta Journal-Constitution - (Georgia) Bomb threat reported near the 
state Capitol. A hoax bomb threat prompted the 2 hour evacuation of several State 
office buildings in Georgia June 11. 

Source: http://www.aic.com/ncws/ncws/brcaking-ncws/two-bomb-thrcats-rcportcd- 
near-state-capitol/nYHf5/ 

27. June 11, Associated Press - (Texas) One wounded in shooting at Army post in 
Texas. Fort Sam Houston in San Antonio was locked down for 2 hours June 10 after a 
soldier opened fire and wounded an instructor at the Fort Sam Houston’s Army 
Medical Department Center and School. Officials took the suspect into custody after he 
surrendered and are investigating the incident. 

Source: http://www.officer.com/news/10958733/one-wounded-in-shooting-at-armv- 
post-in-texas 

28. June 10, KXLY 4 Spokane - (Washington) Wild fire still active after burning 1,000 
acres. Firefighters continue to battle the Mail Trail fire that ignited near Rogersburg 
and burned through 1,000 acres. 

Source: http://lcvallev.kxly.com/news/environment/97191-wild-fire-still-active-after- 
burning- 1 000-acres 

29. June 10, Reno Gazette -Journal - (Nevada) Full containment expected on 100-acre 
Chariot Fire by noon today. Firefighters expected full containment June 10 of the 
Chariot fire that ignited near Red Rock by a lightning strike June 9 and burned 100 
acres. 

Source: http://www.rgi.com/article/20130610/NEWS06/1306100Q7/Full-containment- 
expected-lOO-acre-Chariot-Fire -by-noon-today 

30. June 9, Associated Press - (Washington) Suspected ricin letter to CIA discovered in 
Washington state, FBI says. A letter returned as undeliverable to a Spokane post 
office was determined to be the fifth in a series of ricin-laced letters sent to government 
figures and agencies. The letter was addressed to the Central Intelligence Agency and 
was sent for further testing. 

Source: http://www.foxnews.com/us/2013/06/Q9/fbi-5th-spokane-letter-discovered-in- 
ricin-case/ 

[ Return to top ] 

Emergency Services Sector 

31. June 10. U.S. Securities and Exchange Commission - (Michigan) SEC charges top 
officials at investment adviser in scheme to hide theft from pension fund of Detroit 
police and firefighters. The U.S. Securities and Exchange Commission charged the 
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president and CEO of MayfieldGentry Realty Advisors, along with 4 other executives, 
for taking $3.1 million from a pension fund that the company manages for Detroit’s 
Police and Fire Retirement System without permission in order to open two strip malls 
in California. The firm agreed to settle charges by paying back the stolen funds. 

Source: https ://www . sec . gov/news/press/20 1 3/20 13-1 06 .htm 

32. June 10, Contra Costa Times - (California) Daly City North County fire 
headquarters evacuated due to suspicious letter, later proved harmless. North 
County Fire Authority’s headquarters in Daly City was evacuated for roughly 2 hours 
June 10 after a letter was received in the mail containing a suspicious powder. 
Authorities determined the letter contained harmless wildflower seeds, likely crushed 
during transit. 

Source: http://www.contracostatimes.com/portal/breaking-news/ci 23429 122/letter- 
prompts-evacuation-at-daly-citv-fire-department? loopback=l 

33. June 9, WXYZ 7 Detroit - (Michigan) Plymouth fire station burns after truck 
catches on fire. A fire that started in a truck inside the garage of the Plymouth fire 
department’s station caused extensive damage to the building and destroyed at least one 
truck June 9. The fire department temporarily moved operations to another facility until 
repairs are made. 

Source: http://www.wxvz.com/dpp/news/plvmouth-fire-station-burns-after-truck-fire 
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Information Technology Sector 

34. June 11, Help Net Security - (International) Washington Free Beacon website 
redirects to malware. Invincia researchers found several pages on the Web site 
of the Washington Free Beacon were compromised and used to redirect users to 
a domain hosting the Fiesta exploit kit. The kit attempts to drop the ZeroAccess 
rootkit and the Internet Security Pro fake antivirus malware. 

Source: https://www.net-security.org/malware news.php?id=2516 

35. June 11, Help Net Security - (International) Researchers find self- 
propagating Zeus variant. Researchers at Trend Micro discovered a variant of 
the Zeus/Zbot trojan that spreads via a malicious .pdf file and then copies itself 
onto any removable drives detected on an infected computer. 

Source: https://www.net-securitv.org/malware news.php?id=2515 

36. June 10, Netcraft - (International) Facebook Apps hosted by Heroku used for 
viral Twitter phishing attack. Netcraft identified a Twitter phishing site being 
served from several Facebook Applications hosted on the Heroku service. 
Source: http://news.netcraft.com/archives/2013/06/10/facebook-apps-hosted-by- 
heroku-used-for-viral-twitter-phishing-attack.html 

37. June 10, IDG News Service - (International) New backdoor malware 
‘KeyBoy’ used in targeted attacks in Asia, researchers say. Researchers at 
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Rapid7 discovered an attack campaign using a new malware dubbed KeyBoy to 
install information-stealing backdoors. The campaign targets users in several 
countries in Asia and is spread by spearphishing. 

Source: https://www.networkworld.com/news/20 1 3/06 101 3-new-backdoor- 
malware-39keyboy39-used-270656.html 

38. June 10, Threatpost - (International) IRC botnet leveraging unpatched Plesk 
vulnerability. Researchers found a botnet exploiting a vulnerability in the Plesk 
hosting control panel in unpatched systems. Some Apache server configurations 
were also reported to be vulnerable. 

Source: https://threatpost.com/irc-botnet-leveraging-unpatched-plesk- 
vulnerability/ 

39. June 10, Threatpost - (International) CERT warns of vulnerabilities in HP 
Insight Diagnostics. The Computer Emergency Readiness Team (CERT) 
Program issued an alert over multiple vulnerabilities in HP’s Insight 
Diagnostics server management tool that could be used to run code and take 
over infected computers. 

Source: https://threatpost.com/cert-warns-of-vulnerabilities-in-hp-insight- 
diagnostics/ 

40. June 10, Threatpost - (International) Apple Store vulnerable to XSS. A cross- 
site scripting (XSS) vulnerability was found in the Apple Store Web site, which 
exposes visitors to possible attack. A proof-of-concept exploit code was 
released. 

Source: https://threatpost.com/apple-store-vulnerable-to-xss/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

41. June 11, Beaufort Gazette- (South Carolina) TV, power outages reported in 
Beaufort County. Weather-related television and power outages were reported for 
Hargray Communications, Palmetto Electric, and SCE&G customers in Beaufort 
County June 10. 

Source: http://www.islandpacket.com/2013/Q6/10/2536601/hargrav-reports-tv-outage- 
in-beaufort.html 
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Commercial Facilities Sector 



42. June 11, Orlando Sentinel- (Florida) 20 residents homeless after condo fire. A two- 
alarm fire that started in a second-story unit at Lake Tyler Condominiums in Orlando 
destroyed 12 units and displaced 20 people. 

Source: http ://articles . orlandosentinel.com/20 13-06-11 /news/os-condo-fire-holden- 
avenue-orange-20130610 1 two-alarm-blaze-orange-county-fire-rescue-20-residents 

43. June 10, KTHV 11 Little Rock - (Arkansas) 2 firefighters injured in apartment fire. 
A fire at the Out-in-the Woods Apartments in Little Rock June 10 injured 2 firefighters 
and displaced 27 people. 

Source: http://www.thvl Lcom/news/article/268342/2/2-firefighters-iniured-in- 
apartment-fire 

44. June 10, KING 5 Seattle- (Washington) 18 families safe after two-alarm apartment 
fire. A fire at the Sea Fox Apartment complex in Des Moines displaced 18 families and 
caused an unknown amount of damage June 10. 

Source: http://www.king5.com/news/local/Two-alarm-fire-destroys-and-18-unit- 
210806211.html 

45. June 10, San Anselmo- Fairfax Patch- (California) Fire destroys Fairfax Condo, 
sends two to hospital. June 9 fire at a Fairfax, California condominium injured two 
people, displaced multiple residents, and caused $200,000 in estimated damages. 
Source: http://sananselmofairfax.patch.corn/groups/breaking-news/p/fire-destrovs- 
fairfax-condo-sends-two-to-hospital 
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Dams Sector 



46. June 10, WTAJ 32 Altoona - (Pennsylvania) Damaged dam causing concern. A dam 
at Lake Somerset, which has been leaking for the past 3 years, will need to be rebuilt at 
an estimated cost of more than $7,000,000, according to officials from the 
Pennsylvania Fish and Boat Commission. Water levels at the lake have been 
intentionally lowered to ease the leak which has also led to a lower fish population. 
Source: http://wearecentralpa.com/fulltext-news7nxd id=469192 
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